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i 

SYSTEM FOR SELECTIVELY DISTRIBUTING MUSIC 
BACKGROUND OF THE INVENTION 

1. Field of the Invention 

5 The present invention relates to a music distribution system for jukeboxes. 

More specifically, it relates to a system in which a jukebox selectively requests 
transmission of specific songs from a centralized storage location based upon 
usage information, and a system which coordinates transmission to optimize 
channel bandwidth. 

10 2. Discussion of the Related Art 

Conventional jukeboxes play music from records or compact discs 
containing several songs. The records or disks are stored locally at the jukebox and 
are physically selected and played with these jukeboxes. The user views a display 
listing song selections contained in each record or disk. The user then selects a 

15 song to be played by depositing money into the jukebox and pushing keys which 
represent the desired song. A record or disc changer in the jukebox selects the 
x ^appropriate record or disc and transfers it to the player, which can take as much as 
30 seconds. 

There are many deficiencies in conventional jukeboxes.' The most significant 
20 problem relates to music selection. The users are limited to the songs on the • 
records or compact disc which are physically present in the jukebox. However, 
much of the music on these records or discs may be unused. This is because less 
popular songs are often included on the record or disc with more popular songs. 
Jukebox records typically have two songs, one on each side. Compact discs may 
25 have-many songs. Generally, only a couple songs on a disc are popular and played 
often. The remaining songs are merely part of the disc and are not played. 



Estimates indicate that 80% of songs in a jukebox may be unused, this wastes 
space in the jukebox which could have additional popular songs. Also, it is not easy 
to customize song selection for specific clientele at a location. Different 
establishments have clientele which often desire different types of music, or 
i particular songs. There is no easy mechanism to determine the tastes of the users 
at a specific location. Therefore, the jukebox owner will, use general popularity 
information to select songs. Alternatively, certain studies, either formally by 
researchers or informally through the establishment operator, will be used to select 
songs. Such studies also have deficiencies due to sampling problems. 
0 After music is selected, updating the music is time consuming and 

expensive. The records or compact discs must be manually updated by replacing 
the records or disks. Each copy of the record or disc must be purchased and then 
installed in the jukebox. The title also must be updated manually when discs are 
changed. 

i5 Costs of installing and maintaining a jukebox can be extremely high. A 

jukebox can hold as many as 100 discs or records. Installation of the jukebox 
* .requires purchase of a complete set of records or discs. Additional purchases must 
be made in order to change the music. Also, since a jukebox includes many moving 
parts, breakdowns are common. Breakdowns often occur with the money reception 
20 portions or record/disc movement portion. Maintaining the jukebox requires visits 
from specialized technicians. Since the cost of playing a song is typically low. a 
jukebox is too expensive for an establishment in which sings are not often played. 

Therefore, a need exists for a jukebox which permits simple customization of 
song selection for specific locations. A need exists for a jukebox system which 
25 eliminates manual selection and changing of songs. A need exists for a system 
which reduces the costs of operating a jukebox. 
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In personal music listening, a tape, record or disc is played on a simple 
system. The possible songs are limited by the songs owned by the user. It is 
expensive to have large music library, since each song must be purchased. Also, 
song selection can be quite time consuming with a large library, since the songs 

5 must be selected manually. The costs of a jukebox prevent the user from using a 
jukebox as a personal music playing device. Additionally, if a person rents a 
jukebox, such as for a party, songs cannot be consecutively played. Rather, a 
cjelay is required between songs in order to change discs, which is typically between 
8 and 30 seconds. Therefore, a need exists for a jukebox system which is 

10 inexpensive and can operate as a personal music player. A need also exists for a 
system which can play selections consecutively, and can include transition effects, 
such as fades. 

Some of the difficulties of conventional jukeboxes have been overcome by 
different variations of jukebox type designs. Generally, these systems are one of 
15 three types: on-demand streaming, near on-demand streaming and downloading. 
In an on-demand streaming system, the user selects a specific song from a central 
v v or general library. The song is then immediately performed. On-demand streaming 
requires a high speed data channel, at least 128 to 256 kbps, between the server 
and the jukebox. Accommodating this for more than a local area would be 
20 prohibitively expensive. Such a system also requires an extremely high speed 
modem, which is also expensive. 

Near on-demand streaming uses a variety of channels to transfer songs to a 
location for performance. The user can then select one of the multiple songs 
available on the channels, similarly to selecting a television or radio channel. In 
25 order to have the same replay possibilities as a jukebox, each song would have to 
be replayed approximately six times simultaneously. As with on-demand systems, 
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the necessary bandwidth for real time transfer of music far exceeds today's 
technologies. 

In a download system, music is loaded a jukebox from a central location, 
the music is stored at the local location for future playing. A computer jukebox is an 
5 example of such a system. In a computer jukebox, the songs are digitally stored in 
a memory. For example/in U.S. Patent No. 5.355,302 to Martin et al.. new 
recordings are downloaded into the memory of each computer jukebox. Old 
recordings are erased from the memory to create space for the new songs. The 
jukebox monitors and stores information regarding the number of times each song 
1 o has been played. The information is collected at a central location which uses this 
information to calculate royalty payments and to determine which songs are less 
popular and need to be replaced in the jukebox. The jukeboxes are managed 
remotely by a central management system using modems and public telephone 
lines or radio frequency transceivers and antennas, the central management 
15 location also contains a master catalog containing information about each song 
record it stores. The central management system monitors the jukebox, determines 
v available memory space in the jukebox and transmits the new songs and catalog 
information to update de jukebox. The computer jukebox stores songs and graphics 
locally with information about the songs. The jukebox can" initiate communications 
20 with the central management system at predetermined times or if the jukebox 
determines that an event has occurred that the management system should be 
aware of. 

In known computer jukebox systems, the central management system 
determines which songs need to be replaced and wh.ch jukeboxes heed to be 
25 updated by using new song request data entered by customers to aid in determining 
whether new song data should be downloads to the jukebox. The jukebox contains 




a classification hierarchy which allows the user to find a song of interest However, 
existing systems do not include mechanisms for allowing the user to select songs 
by classes of music types and do not provide information at the local jukebox 
relating to song availability at the central storage location. In addition, automatic 
5 mechanisms are not used to update songs based on user selections. Therefore, a 
need exists for a system which can automatically update songs based upon user 
preferences. 

In existing systems, songs are transferred from a central location to the local 

K 

jukeboxes through a variety of media, including satellite broadcasts, RF 

10 transmissions, telephone line transmissions and physical transfers or disks. Songs 
are generally transferred individually to each jukebox. The large files associated 
with downloading music files can be prohibitively expensive, inefficient and time 
consuming. The average size of a compressed song is on the order of 50 
megabytes. The cost to transfer the large files including songs, can be prohibitive 

15 for a computerized jukebox using a central music storage location. In order to 
compete with traditional jukeboxes, the cost of music distribution must be similar to 
v that for purchase of new compact disks. Additionally, the cost for the equipment to 
provide the communication of the songs to the jukebox can be high. Transferring 
songs over a telephone line using modems is expensive, particularly if a long 

20 distance telephone connection is necessary between the jukebox and the central 
location, although high speed modems are fairly inexpensive, in many locations, 
the telephone lines may not be sufficiently clear of noise such that the high speeds 
can be achieved. Higher bandwidth or speed telephone lines may not generally be 
available in any locations, and generally cost more. ISDN communications have 

25 evenJiigher speeds, but are more expensive both for the telephone line and for the 
equipment. Other types of high speed modems, such as ADSL modems, also are 



significantly more expensive and connections are not widely available. Satellite 
receiver costs is also high, both for the equipment and for the ongoing service. 
Songs may also be transferred through the Internet, but significant delays are 
possible. The computer jukebox still needs to be connected to the Internet through 
some type of modem, although a long distance call may not be necessary, 
therefore, a need exists for a more efficient transmission system. In order to 
compete with traditional jukeboxes, the music distribution system must include a low 
cost for both the communication lines and for the communication equipment Also, 
as the size of the system grows, significant increases in the cost of distribution 
equipment must be kept at a minimum. 

Also, computer jukeboxes typically have a dosed architecture. i.e.. the 
jukebox is associated with a specific music distributor and distribution system. This 
creates a large dependency of the jukebox on the distribution system. If the 
distributor ceases to exist, the music in the jukebox may not be replaceable. 
Similarly, spare parts for repair may cease to exist. Therefore, a need exists for an 
open architecture for a distribution system. 

Finally, a system of computer jukeboxes must be secure. Since songs are 
digitally stored in a modifiable memory device, the songs can be copied to other 
devices. Also, unauthorized songs may be loaded onto a jukebox. The music 
distribution system must provide a mechanism for security of the songs. The music 
copy and music distribution must pay a fee. The payment mechanism must avoid 
credit or debit falsifications. Several secure payment mechanisms such as smart 
card, debit card, credit cards, etc. have been used. These mechanisms may 
provide a satisfactory security as long as the connections between the payment 
5 mechanism and the e,ectronic control can not be accessed by hackers or the 
software that controls the payment mechanism can not be modified. 



However, for juke boxes, the juke box operators must have access to the 
connections because they need to service the machines, thus connections can be 
cut and payment mechanism can be emulated fooling the electronic control. From 
the other side, the software that controls the payment mechanism can be easily 
modified and fooled. In this way hackers avoid paying the fees. 

Therefore, a need exists to create a more secure payment mechanism that 
is still secure even if the payment mechanism or software controlling it is violated or 

footed. 

ft 

SUMMARY OF THE INVENTION 

The deficiencies of existing jukebox systems are substantially overcome by a 
jukebox system according to the present invention in which individual songs are 
digitally stored. Music can be transferred from a centra* storage location to the 
jukebox, to update the music without a physical replacement. A music hierarchy 
system exists in the jukebox for determining customer preferences in order to 
automate music selection during updating. Also, a unique distribution system is 
used between the central location and the jukebox which improves on bandwidth 
utilization for transmission. 

Accordingly, it is an object of the present invention to provide a jukebox 
system which uses a statistic replacement algorithm working with different memory 
hierarchies, a scheduling algorithm, and conventional means of communication with 
addressable and broadcasting capabilities. 

It is a further object of the present invention to provide newly installed 
systems with music on demand and to provide all other systems requesting music 
based on local user heeds at deferred times. The deferment results in supplying 
music more efficiently and at a lower cost and by combining requests from multiple 
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locations for a single transmission of music to the multiple jukeboxes 
simultaneously. 

It is a further object of the present invention to have a jukebox 
programmable with different payment methods to allow advanced payments and to 
5 allow automatic access by the jukebox to the central storage system. 

It is a further object of the present invention to store a portion of a 
hierarchical menu at a local jukebox location and to retrieve additional portions of 
the menu based upon local user accesses. 

The present invention also allows songs to be placed on the local jukebox 
10 based upon user inquires into various areas relating to availability. The local 
jukebox automatically determines music to be retrieved at certain locations and 
selectively downloads music based upon actual user preferences at that location. 

It is another aspect of the invention to create a system of music which has a 
low cost, both for equipment and service, for communicating songs to the jukebox 
15 and information to the central location. According to this aspect of the invention, 
one of the jukeboxes designated a master, can operate as a regional service center. 
4 Music is communicated from the centra! storage location to the regional service 
center. Music may be stored at the regional service center or further transmitted to 
other jukeboxes. The subsequent transmission from- the regional service center to 
20 the slave jukeboxes can be over local telephone lines at lower speeds with reduced 
costs. Similarly, the individual jukeboxes can communicate information directly to 
the regional service center. 

It is another aspect of the invention to provide a music distribution system 
which is compatible with the use of compact disks already owned by a jukebox 
25 operator. The computerized jukebox can have an interface to connect with the 
commercial compact disk changers. Album covers and song names can be entered 



or scanned into the memory in the jukebox. If the user selects one of the albums or 
songs on one of the compact disks, the jukebox communicates to the CD changer 
to select and. play the appropriate song. 

It is another aspect of the invention to provide a secure environment for the 
5 transfer of music and other sensitive information (such as monetary certificates)for 
purchasing songs or paying for services from the central location to each of the 
computer jukeboxes. The system includes secure hardware in each of the 
jykeboxes which is used to encrypt and decipher the music and other sensitive 
information (such as monetary certificates) for purchasing songs or paying for 
1 o services provided to that jukebox. The music is stored in an encrypted format which 
prevents copying to other locations, including other jukeboxes within the system. 
The secure hardware is used to ensure the authenticity of distributed music an 
proper payment for the music. 

BRIEF DESCRIPTIONS OF THE DRAWINGS 
15 Fig. 1 is a schematic illustration of a music distribution system according to 

an embodiment of the present invention. 
v , Fig. 2 is a schematic illustration of local music structure including a hierarchy 
of classes of music. 

Fig. 3 is a schematic illustration of a queue chain* for requested music in a 

20 statically assigned channel server. 

Fig. 4 is a schematic illustration of a queue chain for requested music in a 
dynamically assigned channel server. 

Fig 5 is a schematic illustration of a queue chain for requested music in a 
delay lock out channel server. 
25 *- Figs 6a and 6b illustrate the process for initialization of the secure hardware 

in a security mechanism of the present invention. 
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Figs 7a, 7b and 7c illustrate the process for distribution of music using the 
security mechanism of the present invention. 

Figs 8a, 8b and 8c illustrate the. process for distribution of monetary 
certificates in the security mechanism of the present invention. 

Fig. 9 illustrates a block diagram of a second embodiment of the music 
distribution system according to the present invention. 

DETAILED DESCRIPTION 
The present invention relates to a jukebox with digitally store music, and a 
music distribution system for replacing music in the jukebox. It included an 
apparatus and method for requesting certain music stored at a central storage 
location and transmitting it to local jukeboxes. 

The present invention more particularly relates to a Virtual inventories with 
Perpetual Reproduction- and Execution of Electronic Titles (VIP) architecture for 
managing Virtual Electronic Titles (VET). A VET is digitally encoded into a secure 
digital envelope to be used for mail distribution or electronic transmission or storage 
and can only be opened by authorized users. The VET envelope contains diverse 
% qbject types with relational links, and packaging and accounting information. VETs 
can be sold, purchased, stored, rented, distributed, executed, reproduced, produced 
or interchanged. Execution of an object type in a VET results in human perception 
of texts, graphics, sounds, videos, three dimensional objects, etc. Thus, VETs can 
form the storage mechanism for a digital jukebox. Each song is stored as a 
separate VET which can then be executed upon demand from the user. 
Reproduction of an object type in a VET results in reproducing the object types in a 
media, such as Digital Video Disc (DVD). Compact Disc (CD), tapes, paper text 
printing, paper image printing, sculptures, etc. thus, it is also possible to reproduce 
a song in another format so that the customer can obtain an actual copy, and the 
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jukebox can function as a retail distribution center. Royalty payments for the 
transmission copies can be ensured through use of the payment mechanism 
. discussed below. 

Fig. 1 illustrates a music distribution system using VETs according to an 

5 embodiment of the present invention, including access methods between a jukebox 
and a central storage location. Fig. 1 contains a CIP architecture in a client/server 
environment Three main elements comprise the VIP, including the Intelligent 
Terminal (IT)IT1-IT9, the Operation Service Centers (OSC) R1, R2, G1 and the 
Communication Means (CM) CM1-CM9. Even though a single distribution system 

10 is illustrated, multiple distribution systems may be used for distributing music to any 
of the ITs. For example, as illustrated in Fig. 1, IT4 can receive music through 
either R1 (a primary distribution channel) or R2(a secondary distribution channel). 
Similarly, each IT may be connected to more than one independent network. Thus, 
each IT can operate in an open architecture which is not limited to a single 

15 distributor. The IT can operate like a computer in that it can include instructions for 
connecting to different distribution networks. A single network is illustrated in Fig. 1 
^ and discussed below. 

In one embodiment of the present invention, the IT is a Personal Jukebox 
(PJ) that can be capable of supplying music execution on demand 95% of the time 

20 at no cost. Personal Jukebox does not limit the devices to in-home locations. 
.Rather, it refers to the capability to select songs according personal tastes and 
desires of the customers at a specific location. However, the distribution system of 
the present invention can be used to provide music through a PJ for individuals in- 
home. The high capability of the PJ to execute music on demand is achieved by 

25 sensing the music demand directly from the end users, as discussed below. The 
VIP uses the demand figures as sensed by many Pjs to physically place VETs. The 
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Regional Servers R1. R2 in the OSC use the local demand sensing information to 
determine local popularity demand, while the Global Server G1 uses the information 
to determine regional popularity demand. Each PJ uses individual demand sensing 
to determine local storage of VETs. 
5 The PJ platform (any of lT1-IT9)contains a CPU hardware box, a massive 

storage system, and a real time operating system and drivers for the hardware 
devices. The CPU hardware box is based on PC-like hardware or set-up-box type 
hardware, the massive storage system is large enough to store more than 200 
compressed songs, as VETs, with associated date types (text and graphic images), 
10 or generally has about 1 Gigabyte storage capacity. The massive storage system is 
scaleable to the user's needs. Since songs can be individually selected for 
inclusions de.etion)from the storage system of the PJ. only desired songs need to 
be stored. No storage is wasted on songs which are not desired. 

The Global Distribution Platform G1 in fig. 1 consists of a LAN connected to 
1 5 a WAN. This Global Operation Service Center G1 is comprised of a master server, 
hierarchical storage subsystem, a communication server, a connection equipment 
4 to a public or private network, and a VET factory. 

Regional OSCs R1 . r2 are similar to the Global OSC G1 . except that they do 
not require a VET factory. Regional OSCs R1. R2 are geographically closer to the 
20 ITS that they are serving. Thus, they can provide a faster, and generally less 
expensive, source for any given VET. As noted above, the demand information 
from each of the ^'corresponding to a Regional OSC can be used to determine 
specific VETs to maintain at the Regional OSC. Regional OSCs. such as R1. R2. 
can operate as alternate nodes in the VIP network and OSC replacement for other 
25 regions so that if a node in the VIP network fails, alternative routes and alternative 
Regional or Global OSCs can be accessed. While a single level of OSC is 
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illustrated between the Global OSC and the Pjs, multiple levels may be used. The 
demand information is used at each level to maintain the most popular songs for the 
lower levels. 

The OSC provides operation services to the ITs. In Fig. 1, different options 
5 for the ITs to access the OSCs are shown CM1-CM9. There is a high volume, high 
speed distribution of VETs from the OSCs to the ITs. In addition, there is a low 
volume, low speed exchange of information from the ITs to the OSCs. The 
information exchanged includes the IT sending a VET request to an OSC, an IT 
accessing statistical information at the OSC, and OSC accessing sales information 
10 from an IT, and an OSC marking a remote control diagnostic, etc. If a Regional 
OSC fails, an IT can connect to another Regional OSC, or to the Global OSC for 
services. 

IT1 in Fig. 1 , uses an asynchronous analog telephone line for the exchange 
of information. IT1 sends a request for a VET to the Regional OSC to reduce the 
15 cost of the telephone call. The Regional OSC R1 then forwards the request to the 
Global OSC G1, which in turn up-Iinks the requested VET to the satellite. The 
v satellite then transmits the requested. VET to the IT1 satellite receiver. In this 
embodiment, only a receiver, antenna, down converter and a phone line are needed, 
locally. 

20 IT2 uses an integrated digital switched network for the change of information 

and VET distribution. This network requires a modem and is currently becoming 

standardized among service providers. 

IT3 uses removable discs to store all information related to accounting, 

sales, user VET requests, etc. The disc is mailed to the contracted OSC where the 
25 information is loaded into databases to process the information. The OSC the 

generates a custom made disc with the VET requests for specified IT user. 
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Alternatively, the OSC may generate a generally programmed disc with common 
distributions, such as for new songs. 

IT4 uses a cable modem to exchange information and request VETs. 
Currently, there is no uniformity among cable operators which makes this method of 
5 accessing the OSC difficult. Also, some cable operators do not have bi-directional 
data transmission capabilities. 

ITS uses an asymmetric digital subscriber line to exchange information and 

request VETs. 

IT6 uses switched digital video or a hybrid-fiber coaxial cable modem to 
10 access the OSC. Which allows for an extremely high speed bandwidth. This 
method is actively being developed in the US by the increase in fiber optic 
communications. 

IT7 uses the terrestrial wireless technologies Multipoint Multichannel 
Distribution Service (MMDS) or Local Multipoint Distribution Service (LMDS) for 
15 access to the OSC. The MMDS is unidirectional with a high bandwidth. LMDS is 
bi-directional based on cellular-like technology. 

IT8 uses only a satellite receiver and is not interactive. VETs are 
broadcasted continuously and the ITs automatically select what they want to 
download based upon local demand statistics as discussed befow. ITs are charged 
20 a periodic fee or are charged for the number of VETs that are down loaded. The 
OSCs have the ability, to disable/enable the IT downloading (reproduction) and 
execution capabilities of the IT. 

IT9 uses a portable computer to capture transaction and statistical 
information from the It. and downloads contents required by the IT. The connection 
25 between the IT and the OSC is through a port or LAN. 



A communication server or access server performs the interfacing functions 
of network protocol translation, speed marching, buffering, and network packet 
routing between the ITs and OSCs. When using satellite delivery to the ITs the 
network carrier is connected to the OSC by means of a high speed T1 or E1 link (or 

5 other high speed link) from the communications server to the satellite up-link, where 
data will be sent to the satellite for delivery to the geographically distributed ITs. 
The communication server and the OSC are internally connected to a Master server 
through a network hub which performs the interconnection of all network devices to 
guarantee a high network throughput speed. 

10 The VET factory in the Global OSC Gl produces VET envelopes which are 

transferred throughout the system. The VET factory has one or more multimedia 
workstations with editing and authoring capabilities, temporary storage, content 
capture units and an internal connection to the OSC network hub. The workstation 
is connected to the LAN and WAN through the network hub so that the workstation 

15 can access the master server and the external WAN devices. The contents of the 
VET can include text such as an album name, song name, author, producer, date, 
serial number, royalty owner, etc., an image such as an album cover, or audio such 
as. the song or digital file. The workstation creates the VET and sends it to the 
Master Server through the Network Hub. The Master Server in turn updates the 

20 VET data base. The workstation has ports to connect to capture devices, such as 
CD players to capture songs. The capture unit converts a title into a signal. 

In the present invention, a VET envelope is distributed as a single unit the 
envelope contains a group of VETs of the same or different data types liked 
together. Normally, the VETs in an envelope will have a title relationship. For 

25 example, an envelope can be created from an album so that the envelope contains 
five songs from the album. The envelope would contain 5 compressed and 



encrypted audio titles, 5 uncompressed non-encrypted song titles, each linked to its 
respective audio title, one uncompressed album title liked to each of the song titles 
and one compressed non-encrypted cover page linked to the album title. 

The access method between a PJ and a central storage location as shown in 

5 Fig.1 includes the following steps. The OSC periodically broadcasts to ait locations 
a list of new songs available for distribution. The Personal Jukebox (IT1-IT9) 
downloads the list of new songs. The PJ determines the users' demand by 
capturing the users' requirements and processes the demands statistically. The PJ 
then determines which new titles are convenient to download. Previous to the 

10 attempt to download, the PJ would have been loaded with credits through a bank 
payment, bank deposit or a PJ fund collection mechanism, such as coins, bills, 
smart cards, etc. Once the credits are deposited, the PJ is auto-enabled or not 
disabled by the OSC satellite transmission to download a number of song titles. As 
a title is downloaded, the number of credits is decreased. The PJ downloads only 

15 titles that it has selected, as long as credits remain. Each of the jukeboxes locally 
stores a portion of the music available in the system and can play that music. Music 
v not on the jukebox can be retrieved from a central storage location through any 
electronic transfer medium such as CM1-CM9 shown in Fig.1. Only music which 
has been enabled through the use of the credits can be received, deciphered and 

20 played. When a PJ runs out of credits, songs are not enabled. Also, music which is 
copied from another source, such as another PJ, will not be enabled. Thus, 
improperly copied songs cannot be deciphered or played. Other security features 
are discussed below. 

Fig. 2 illustrates a local music structure for determining demand information 

25 and performing song selection. Such a structure is included at each level in the VIP 
based upon information from a lower level. The structure includes a hierarchy of 
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classes of music with levels for music types (such as Latin) and sub-types (such as 
Samba, Salsa, Merengue), albums, and songs. Each jukebox includes only a 
portion of the hierarchy which would be locally accessible. The entire hierarchy 
would be located in the central location. Regional distribution locations, such as R1, 
5 R2 in Fig 1, may include all or a portion of the hierarchy. The portion of the 
hierarchy on the jukebox is then traversed in order to select songs that are locally 
available to be played. The user selects a music type, then a sub-type, an album 
and then a song. Only songs for which VETs are stored can be locally accessed. 
Even though a user selects an album, not all of the songs on the album may be 

10 stored or selected. Thus, the popular songs on an album are stored while less 
popular songs are not 

In order to determine user preferences, the user can traverse the hierarchy 
to select types of music or specific songs which are not currently available and 
which would be desirable. These songs can then be downloaded to the jukebox 

15 from the central (or regional) location. The jukebox maintains statistics regarding 
the number of times that a node in the hierarchy is reviewed by a user. If the node 
is reviewed a certain number of times (either within a given time period or as a 
certain percentage of the total number of nodes visited), information which is below 
that node is retrieved from the central storage location. Thus, there may not be any 

20 songs locally from a type of music. However, as users access the hierarchy and 
select each type, its statistics increase until lower portions of the hierarchy should 
be retrieved. The number of hits necessary in order to request additional portions of 
hierarchy or of certain songs from the central location can vary based upon the 
objectives for the jukebox. More rapid retrieval, such as direct on-line access, 

25 would naturally be more expensive. Alternatively, the system can request that the 
new music or hierarchy be sent within a given time, such as two days. As 
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discussed above, some songs may be periodically broadcast from the central 
location. The hierarchy may also be similarly broadcast. Within this structure, when 
a jukebox determines that a song portion of the hierarchy is to be retrieved, it 
monitors the broadcast until the song or portion of the hierarchy is broadcast 
5 When detected, the jukebox will download the desired information from the 
broadcast. 

When a portion of the hierarchy is retrieved, it will not necessarily retrieve 
everything under it Rather, it will retrieve one level and portions of lower levels. 
Additionally, portions of the hierarchy and songs which are not accessed as often 
10 are deleted in order to make space for new portions and songs. Thus, the jukebox 
is automatically updated with songs of interest to the clientele for that particular 
location. 

The system also optimizes the channel bandwidth for transmission of 
information from the central location to the separate jukeboxes. Each request for 

1 5 additional portions of the hierarchy or for specific titles of songs includes a time for 
delivery. When information is requested so that times for delivery overlap, the 
information can be simultaneously transmitted to multiple jukeboxes. This is 
particularly relevant when the information is transmitted by satellite or through a 
computer network. It permits a broadcast transmission to multiple final locations. 

20 In one embodiment of the present invention, the Song/Album Cover ratio is 

the number of productive songs in an album. The productive sings are classified in 
two types: those that generate 80% of the monthly sales and those that generate 
the remaining 20% of sales. Based on studies, the present invention uses 16% of 
the album songs in CD-based jukeboxes which generate the 80% of the monthly 

25 sales: Those songs are Top Performers. The Average Performers are the 11% of 
the album songs which generate the other 20% of sales. The total number of 
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productive songs is the combination of the Top Performers and the Average 
Performers. The OSC inventories are loaded with productive songs only, thereby 
eliminating 73% of the non-productive songs. The Top and Average Performers, 
Monthly Premiere songs and the index are periodically transmitted by the central 

5 storage location without any requests from the jukeboxes. 

During transmission, one bandwidth requirement is necessary for the 
transmission of the Top and Average Performers and Monthly Premiere songs, 
which is a non interactive, update transmission which can be programmed to occur 
in programmable periods, such as twice a month. All local jukeboxes receive the 

10 non-interactive broadcast of new titles. The titles can be actually downloaded by 
the jukeboxes during the broadcast time. A second bandwidth requirement is 
necessary for the interactive, update transmission when the jukeboxes request their 
VETs from the OSCs based on user demand. This often occurs when a jukebox is 
installed in a new location. Both the interactive and non-interactive modes can run 

1 5 simultaneously. 

This results in a Coincident Overlapping Concurrent Delivery (COCD) 
system to minimize the bandwidth requirements and the cost of transmission and to 
improve the availability of transmission of VETs. Different clients may request the 
same VET in an overlapping time. The more overlapping time'that exists, the more 

20 chances there are that more clients will share the same VET delivery. Overlapping 
time is promoted by offering the lowest, cost for the clients tolerating the longest 
transmission delay range. 

The COCD is comprised of a queuing system, distributors, channel servers, 
a COCD controller and a request conflict handler. A queue includes VETjSroups 

25 which represent one or more VETJransmission_Requests. the queues have a 
concatenation pointer to move the VET_Groups that complete their wait time in the 
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queue to another queue or to a Distributor. The Distributor sends the VET_Group 

to a Channel Server for transmission. 

In the COCO system, and IT, such as a Personal Jukebox, sends a 

VET_Transmission_Request when it requires a VET to be transmitted. Queues, 
5 Groups and Requests have unique instruction parameters. The class parameters 

include: instructing the COCD system how long VET should wait before 

transmission, indicating during what time frame the transmission should occur. 

instructing the COCD system about communication savings, and indicating when 

the queue becomes enabled for transmission, etc. The availability parameters 
10 include indicating to the COCD the worst case delay window expected for a group in 

that queue. 

The COCD controller is a task which performs the COCD intelligence and 
operation. It creates VET_Groups. inserts and moves them from queue to queue, 
updates the parameters and arranges the scheduling. 
15 The OSC will invoke the COCD upon receipt of the ITs 

VET_Transmission_Request. The COCD determines which VET_Groups are 
V -pending for transmission with the same VET name and compatible instruction 
parameters. A new group is created and inserted in the queue if the 
VET_Transmission_Request and the VETGroup do not have the same class 
20 parameters. Otherwise, the VET_Transmission_Request is stacked in the group. If 
a shorter delay time is requested, the group is updated with the new request 
availability parameters and all of the stacked requests are moved to a higher 
availability queue that matches all the instruction parameters. If a. shorter delay 
time in not requested, then the request is stacked in the group. This ensures that 
25 only one transmission will occur for all the pending requests stacked and waiting in 
the same group for the same VET transmission. 
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The COCD Distributor chooses VETJSroups from one or more enabled 
queues and distributes them to one or more channel servers. The Distributor 
balances the choosing and distributing as a!function of the weight of the queue and 
the throughput of the channel server by implementing distribution functions such as 
5 round robin, fixed priority, daisy chain, etc. 

The channel server in the COGD receives the groups from the Distributor 
and performs the actual VET transmission. Figs. 3,4 ( and 5 illustrate an example of 
ttje COCD system with several VET requests waiting. There are 6 different queues 
configured in the COCD as shown. 
10 In Fig. 3, queues 1,2, and 3 are concatenated and illustrate optimizing 

availability of statically assigned channel servers. If, for example, a VETJSroup X 
is the first in a queue and the higher availability queues in the chain are empty, the 
Distributor will pull the Vet_Group X for transmission, causing the transmission to 
occur ahead of schedule. This feature is especially suitable for communication 
15 services where the channel servers are statically assigned (continuos)because the 
OSC is charged whether the channel is used or not. The COCD reschedules the 
VET requests to distribute them to optimize the use of the channel server time. 

In Fig. 4, queues 4 and 5 are concatenated and illustrate optimizing 
transmission costs of dynamically assigned channel servers. By delaying the 
20 transmission of requested VETs, there is a reduction In data transmission and a 
lower transmission cost; especially when channel servers are dynamically assigned 
because the carriers charge according to the amount of data transmitted. 

In Fig. 5 t queue 6 is by itself and illustrates optimizing for delay lock out. In 
this embodiment, there may be a precise time specified for a particular group in a 
25 queue, these VETs are time dependent, and are therefore not promoted to a higher 
availability queue and are not stacked with or into other VET groups. This delay 
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lock out allows a more precise wait time before transmission. This feature is 
particularly suitable for broadcast transmission systems, which require some type of 
deterministic transmission time, for example, with non-interactive satellite 
transmission (ITS in Fig. 1), the OSC must transmit the song names (the index 
5 hierarchy) of new songs which are available. The system may delay a fixed time, 
such as one week, for each jukebox to determine demand for each of the new 
songs before transmitting the songs themselves. 

In Figs. 3 and 4, queues 1 and 4 have been assigned a channel server 
through Distributor 1. The other queues in Figs. 3-5 are concatenated to the 
10 Next.State or the next queue. For example, in Fig. 3. the output of queue 3 goes to 
the input of queue 2 and the output of queue 2 goes to 'the input of queue 1 . Queue 
1 occupies 66% of the time of the channel server, while queue 4 is using only 33% 
of the channel service's attention. 

The queuing system of the present invention allows for the more efficient 
1 5 transfer of music to multiple locations, saving both time and money. 

The Personal Jukebox in the present invention may be for either commercial 
* or home use. For the home version, the monitor, communication equipment, funds 
collection units and the sound subsystem are optional and can be added at will 
since the home user may have a television as a monitor and a' home sound system 

20 connected to the PJ. 

Figs. 6a-8c illustrate operation of a security system according to an 
embodiment of the present invention. The security system is used to prevent 
improper copying of songs stored in a Persona. Jukebox. It also prevents 
unauthorized storage or playing of music with the Personal Jukebox. It also 

25 prevents improper use of monetary certificates used for purchasing song copies or 
other types of products or services. In the security system of the present invention. 




23 



the songs in each jukebox are stored in an encrypted format which prevents them 
from being transferred to another jukebox or other storage medium, music which is 
transferred to the jukebox from one of the OSCs is also encrypted. The decryption 
of the transferred music requires sufficient monetary credits; otherwise, the VETs 
5 cannot be decrypted. Similarly, the coordination of the use of monetary credits 
must be controlled by the OSC to prevent unauthorized increases in credits. 

Each PJ includes secure hardware, which according to one embodiment is 

located on the audio card. The secure hardware, implemented in a monolithic 

i\ 

format, is used to encrypt and decrypt information. Since the secure hardware is 
10 monolithic, only the input and output data can be accessed. All of the digital inputs 
and outputs to the secure hardware are in an encrypted format which prevents 
unauthorized copying of the VETs or monetary certificates or another sensitive data. 

The secure hardware for each PJ is unique, and will decrypt and encrypt, 
data differently. Therefore, the secure hardware is not transferable between 
15 different jukeboxes. However, if the secure hardware for a jukebox becomes 
damaged, it must be repaired in order to retrieve and decrypt the VETs stored by 
s the secure hardware. A set of public and private keys are used to encrypt and 
decrypt VETs in the secure hardware. The OSG can maintain a proper index to 
keys which can be used to repair or replace defective or damaged secure hardware. 
20 Preferably, a maintenance person will need to access the data (after entry of 
passwords or other appropriate safeguard) at the OSC to download the necessary 
keys for correcting the secure hardware. The initialization process for the secure 
hardware is illustrated in Figs. 6a and 6b. . . 

As illustrated in Fig. 6a, an authorized center of the OSC generates an 
25 external IT (Intelligent Terminal, or Juke Box)key r an external SH(secure 
hardware)key, and an external serial number for the secure hardware and 
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corresponding IT (step 101). This information is encrypted (step 103)using a secret 
SH key (step 102) which is known exclusively at the OSC and the specific secure 
hardware. The encrypted information, called an initialization envelope, is the 
delivered to the secure hardware of the IT. the initialization envelope can be 
transferred in different manners, including on physical disks, by modem, or through 
a broadcast to the specific IT. The secure hardware the decrypts the initialization 
envelope (step 106) to recover the external keys and serial number. No other IT 
knows the Int. SH key (105 in figure 6a) used to encrypt the initialization envelope, 
therefore the envelope can exclusively be decrypted by the IT for .which the 
envelope was generated. The secure hardware then determines whether the 
initialization was proper by comparing the external SH key with the internal SH key. 
If the keys do no match, then the initialization envelope has become corrupted ( or 
is unauthorized)and the process terminates (step 109)-. Alternatively, the IT can be 
disabled, since an unauthorized modification was attempted. If the keys do match, 
then the internal IT key and internal serial number are updated with the new 
information from the OSC (steps 1 10,1 13). If the secure hardware is being repaired 
' or replaced, the external IT key selected by the OSC will correspond to the internal 
IT key for the device where the secure hardware is located. Since the VETs are 
encrypted and decrypted using the internal IT key, the repaired or replaced secure 
hardware can decrypt and play the previously stored VETs. The serial numbers are 
used to control monetary credits as discussed below. 

The process for distributing VETs in connection with the security system is 
illustrated in Figs. 7a, 7b and 7c. A compressed VET 201.. including a 
corresponding cost, is encrypted (step 203) at the OSC using a VET key 202 to 
create a VET envelope. The VET key can be based upon time to prevent a broken 
code from being used continuously. The VET envelope is then transferred to the 
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proper ITs, where they are stored in the IT hierarchical storage. Since the VET 
envelopes are encrypted when stored they cannot be improperly copied by others, 
the VET envelopes can be copied to other ITs or other storage devices, but a 
proper key is needed to decrypt them. The secure hardware is the used to decrypt 

5 the VET envelopes. First, a proper VET key is selected (step 216) based upon the 
date of the VET envelope. The VET key is used to decrypt the contents of the VET 
envelope (step 218). If the IT has sufficient monetary, credits (steps 207-2099, then 
the decrypted VET us again encrypted, this time with the internal IT key of the 
secure hardware (step 224, Fig. 7b). The encrypted VET is again stored in the IT 

10 hierarchical storage. When a song is selected to be played, the VET is retrieved 
from storage and decrypted using the internal IT key (step 227) in the secure 
hardware. At steps 228-229, the VET is then decompressed, D/A converted, and 
output to the audio amplifier 230. Monetary credits are used for decrypting VET 
envelopes. This ensues that payments are received for songs which are provided 

15 to an IT. As noted above, the VET envelope includes a cost. The IT includes an 
internal store 212 of the monetary credits available. The cost of the VET to be 
v decrypted is compared with the value in the internal store 212. If the internal credits 
are sufficient, then the amount in the internal store is reduced by the VET cost (step 
209) and the decrypted VET is further processed,* as discussed above. If the 

20 internal credits are not sufficient, the decryption is terminated (step 210). 

Fig 7c illustrates a process for inputting songs from sources other than the 
OSC. The secure hardware is used to compress and encrypt a received song as a 
VET. The Vet is divided into blocks (step 232), each of which can be associated 
with a cost. The cost and VET data are multiplexed (step 235) and encrypted (step 

25 238)Iusing the VET key. The outputted VET envelope is the stored in the IT 
hierarchical storage (step 240) for further processing. 
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Figs. 8a-8c illustrate the process for increasing monetary credits for an It, 
Monetary credits are increased by transferring a monetary certificate to the It from 
the OSC. The monetary certificate is. encrypted to prevent unauthorized 
modifications. At step 301, the certificate is created with an amount and proper 
keys. The monetary certificate (with or without a monetary amount) can also 
include a new VET key to be used for a later dated VET transfers. The certificate is 
then encrypted using the interna. IT key for the IT to recede the credit (step 303). 
Of course, the transfer of money to the OSC from the IT owner can be performed in 
differ manners, is it necessary to say this? We do use satellite, keyboard, 
modem, fax to transfer the monetary credits. The certificate is then transferred to 
the It through an appropriate transfer mechanism." Such mechanisms can include 
direct transmissions or through transfer of appropriate codes to be entered on a 
keyboard. The interna. It keys is used to decrypt the certificate (step 322). The 
certificate is then authenticated by comparing the received externa. IT key to the 
interna. IT key (step 325) and comparing the received externa, seria. number with 
the interna, serial number (step 331). If there are any differences, the certificate is 
* judged to be inva.id. When a certificate is invalidate transmissions or through 

• . Ko ontprpd on a keyboard. The internal It keys is 
transfer of appropriate codes to be enterea on a neyuuc 

used to decrypt the certificate (step 322). The certificate- is then authenticated by 
comparing the received external IT key to the interna. IT key (step 325) and 
comparing the received, externa, seria. number with the internal seria. number (step 
331). If there are any differences, the certificate is judged to be invalid. When a 
certificate is inva.id. the transaction can be aborted, or. a.ternat*e.y. the IT may be 
disabled (step 327). Seria. numbers are used to ensure that certificates are not 
5 counterfeited, dup.icated or lost. Each certificate has a seria. number set by the 
OSC. The serial number in the .T corresponds to the .ast seria. number sent to the 
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IT. The serial number is initialized in the secure hardware from the OSC as 
discussed above. When each certificate is received, the internal serial number is 
Increased (step 331) by a predetermined amount Typically, serial numbers may be 
increased by one, but other amounts could be used for further protection. If the 

5 certificate is determined to be authentic, then the internal monetary credits are 
increased by the amount of the credits in the certificate (step 333). 

The monetary certificates can also be used to transmit new VET keys. 
When a certificate is received, the VET key is compared to the internal VET key 
(step 335). If it is different, then a new key is being provided. The system then 

10 stores the VET key along with the date of the certificate. The new VET key is used 
for VETs received after the certificate and until the next VET key change is made. 
Since VETs may be stored before being decrypted, the VET keys fro various dates 
can be stored in a memory 334 of the secure hardware. The certificate can also be 
used to adjust the block cost for creating VETs which are not from the OSC. The 

15 internal block costs is set to the received external block cost(step 338). The internal 
block cost is used in the VET processing as discussed above. Once the certificate 
v has been fully processed, the processing ends. 

Fig. 9 illustrates a second embodiment of the music distribution system 
according to the present invention. As in the first embodiment, this embodiment 

20 includes a global music distribution platform 908 which is an operational service 
center. The operational service center 908 can communicate to jukeboxes using a 
variety of mechanisms. For example, communications can be on telephone lines 
using a modem 911, through removable storage media 907,916, such as diskettes, 
or through satellite 901 transmissions, with satellite transmissions, songs and other 

25 information can be transferred to a large number of jukeboxes simultaneously, 
reducing the total transfer cost per song. A stand alone/listen only jukebox 927 may 
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be connected to a satellite receive 919 to only receive satellite transmissions. It 
may not have direct communications to the operational service center 908. 
Alternatively, a listen/talk jukebox 926 may receive songs through the satellite 
receiver 918 and may transfer information through a telephone line modem 917. 
5 • Typically, this connection would be a long distance telephone connection, which 
would be expensive for transmitting songs, but could be used for transferring 
playing data, which has a much smaller volume. Removable storage media 916, 

such as a diskette, can be used for communicating with a stand alone mail jukebox 

k 

925. the songs and the playing data can be transferred by mailing diskettes from 
10 the operational service center to the jukebox location where they are loaded by an 
operator. 

The distribution costs for music and the collection costs for playing data can 
be further reduced by use of an operator region 902. One of the jukeboxes in the 
operator region 902 functions as a master jukebox 906. The master jukebox 906 

15 operates in a manner similar to the regional operating service centers R1, R2 of the 
first embodiment of the invention illustrated in Fig. 1. In addition, the master 
v jukebox 906 functions as a regular jukebox location. Thus, the master jukebox 906 
can communicate with the operational service center 908 through any of the 
distribution types, including telephone line modems 910, removable storage 907, or 

20 satellite reception 903. in addition, the master jukebox 906 is connected through 
telephone line modems. 910. 913, 914. 915 to a plurality of slave jukeboxes 922, 
923, 924. Preferably, the slave jukeboxes 922, 923, 924 are located within a local 
calling region of the master jukebox 906. In this manner, the songs can be 
distributed less expensively from the master jukebox to the slave jukeboxes. 

25 Alternatively, removable storage media 912 can be used for transferring songs to 
slave jukeboxes 920,921. The communications between the slave jukeboxes and 
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the master jukebox can also be two way. In this manner, the information about 
playing of songs, and the selections for new songs can be transferred back to the 
master jukebox From there it can be transferred to the operational service center 
908. Although Fig. 9 illustrates a single level between the operational service center 
5 908 and the master jukebox 906, any number of regional operational service 
centers or other master jukeboxes can be used in a hierarchical structure. Since 
each master jukebox will communicate with only a portion of the slave jukeboxes in 

the system, communications over telephone lines should be sufficient A single 

<\ 

phone line can provide 270 hours of communication per month. Assuming that the 

10 transfer of a song lasts approximately 20 minutes, a single phone line can distribute 
2160 songs per month. The master jukebox 906 could provide an average of six 
new songs per month to 360 slave jukeboxes. With this number of songs, each 
slave jukebox may be assigned certain time slots for accessing the master jukebox. 
When accessed, the slave jukebox can transfer the playing information to the 

1 5 master jukebox and download and necessary songs. 

Fig. 9 also illustrates use of the present invention in connection with current 
* jukebox technologies. Many jukebox operators may already have a significant 
inventory of compact disks on which a large portion of the music is stored. As 
illustrated in Fig. 9, a jukebox 927 can have an interface for- connecting to a CD 

20 changer 928. The existing inventor of compact disks can be played in the CD 
changer. In addition to. selecting songs stored in the memory of the jukebox 927, 
the jukebox can be programmed to operate the CD changer through the interface. 
Thus, if a user desires to listen to a song which is located on an existing CD inside 
the CD changer, the jukebox will provide a signal to the CD changer to select and 

25 playlhe desired song. In order to operate with the CD changer, information about 
the CD's in the changer must be entered into the jukebox. A scanner 929 can be 
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connected to the jukebox for scanning in album covers to be displayed during the 
selection process. A keyboard 930 can be used for entering song information, as 
well as the specific location of the CD's in the changer. 

Having now described a few embodiments of the invention, it should be 
apparent to those skilled in the art that the foregoing is merely illustrative and not 
limiting, having been presented by way of example only. Numerous modifications 
and other embodiments are within the scope of one of ordinary skill in the art and 
are contemplated as falling within the scope of the invention as defined by the 

I 

appended claims. 
What is claimed is: 
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CLAIMS 

1. A music distribution system for local digital electronic jukeboxes 
comprising: 

5 a central storage location including available songs, graphics, and titles; 

a menuing system, said menuing system includes storing a portion of a 
menu at a local jukebox location and storing a complete menu at said central 
storage location; 

a communication means between said central storage location and said local 
10 jukeboxes; and 

a scheduler for coordinating transmission from said central storage location 
to said local jukeboxes; 

2. A music distribution system for local digital electronic jukeboxes as 
claimed in claim 1 , wherein said menuing system includes a statistical replacement 

15 algorithm for retrieving additional portions of a menu based upon local accesses to 
said local jukebox. 

v 3. A music distribution system for local digital electronic jukeboxes as 

claimed in claim 1 , wherein said songs are placed on said local jukebox based upon 
user inquiries about availability. 
20 4. A music distribution system for local digital electronic jukeboxes as 

claimed in claim 1, wherein said music is retrieved by said local jukebox 
automatically based upon actual user preferences at a location. 

5. A music distribution system for local digital electronic jukeboxes as 
claimed in claim 1, wherein said scheduler arranges the broadcast, of songs 
25 simultaneously to a plurality of jukeboxes. 
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6. A music distribution system for local digital electronic jukeboxes as 
claimed in claim 1, wherein said scheduler delays transmission of music within a 
requested time frame to improve transmission times and minimize costs. 

7. A music distribution system for local digital electronic jukeboxes as 
claimed in claim 1, wherein said transmission occurs automatically for non- 
interactive updates. 

8. A music distribution system for local digital electronic jukeboxes as 
claimed in claim 1, wherein said local jukebox includes an advanced payment 
system to allow automatic access to said central storage system. 

9. A method for selectively and optimally distributing music including the 
steps of: broadcasting a list of new available songs from a central storage location 
to a plurality of local jukeboxes; 

downloading said list into a local jukebox; 

capturing user demand in said local jukebox; 

processing said user demand statistically in said local jukebox; 

determining which new songs to download using results of said 

processing step; 

loading credits through payments in said local jukebox; 

downloading requested songs automaticallyfrom said central storage 

location into said local jukebox; 

decreasing a number of credits corresponding to said downloading; 

and 

storing a portion of said available music locally. 
10. A method for selectively and optimally distributing music as claimed 
in claim 9. further including; 
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retrieving music from a hierarchy of classes of music, said hierarchy 
stored in its entirety in said central storage location, and a portion stored on said 
local jukebox. 

11. A method for selectively and optimally distributing music as claimed 
in claim 9, further including: 

deferring transmission of music based on local user needs; and 
transmitting music requested based on local user needs from said 

central storage location simultaneously to multiple jukeboxes when requested 

delivery times overlap. 

12. A method for optimally transmitting music selections in a music 
distribution system comprising: 

maintaining statistics in a digital electronic jukebox, regarding a 
number of times a node in a menu hierarchy is reviewed by a user; 

using said statistics to indicate when a node has been reviewed a 
predetermined number of times; 

sending a request automatically for updated music from said jukebox 
to a central storage location, based on said statistics determined in said jukebox; 

said receiving step further including transmitting music from said 
central storage location to a plurality of jukeboxes simultaneously; and 

storing a portion of said menu hierarchy at said jukebox. 

13. A method for optimally transmitting music selections in a music 
distribution system as claimed in claim 12, wherein said menu hierarchy includes 
levels for music types, subtypes, albums, and songs. 

14. A method for optimally transmitting music selections in a music 
distribution systems as claimed in claim 12, wherein said statistics represent actual 
user preferences at said jukebox location. 
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15. A method for optimally transmitting music selections in a music 
distribution system as claimed in claim 12, wherein said transmitting is coordinated 
by delaying some transmission times within an acceptable time period and 
according to a schedule to increase transmission efficiency and minimize costs. 

16. A security system for a music distribution system having at least one 
distribution center and at least one jukebox comprising: 

receiving means for receiving first data encrypted according in a first 



manner, 

i 



first decryption means for decrypting said first data to create second 
10 data; 

encryption means for encrypting said second data in a second 

manner to create third data; 

second decryption means for decrypting said third data to generate 

fourth data. 

15 17. The security system of claim 16, wherein said fourth data can be 

executed to produce One of sounds, graphics, text and video images. 

18. The security system of claim 16. wherein said receiving means, first 
decryption means, encryption means and second decryption means are located in 

the at least one jukebox. 
20 19. The security system of claim 18. wherein said receiving means, first 

decryption means, encryption means and second decryption means are located in 

secure hardware in said at least one jukebox. 

20. The security system of claim 18. wherein the music distribution 

system includes a plurality of jukeboxes; wherein each jukebox includes a 
25 respective receiving means, first decryption means, encryption means and second 
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decryption means; and wherein the second manner used to encrypt said second 
data is different for each of said jukeboxes. 

21 . The security system of claim 1 6 further comprising: 

second encryption means for encrypting data in said first manner to 
5 generate said first data; and 

transmission means for transmitting said first data. 

22. The security system of claim 21, wherein said second encryption 
means and said transmission means are located in the at least one distribution 
center. 

1 0 23. The security system of claim 22, further comprising: 

means for changing said first manner used to encrypt said data to 
create a new first manner used to data to be transmitted after said first manner is 
changed; 

means for transmitting a new first manner for encrypting data to said 
1 5 first decryption means. 

24. The security system of claim 23, wherein said first decryption means 
s includes: 

means for determining when said first data is received; 
means for determining whether said first data is encrypted in said first 
20 manner or in said new first manner based upon when said first data is received; and 
means for decrypting said first data based upon one of said first 
manner and said new first manner. 

25. The security system of claim 23. wherein said first decryption means 
includes means for receiving said new first manner, and means for verifying that 

25 said new first manner is authentic. 

26. The security system of claim 16. further comprising: 
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means for transmitting said second manner to said encryption means 
and said second decryption means; 

means for receiving said second manner; and 

means for verifying that said second manner is authentic. 

27. The security system of claim 16, wherein said first data includes a 
cost associated with said first data; wherein said first decryption means includes 
means for determining whether a credit is greater than said cost; and wherein said 
first decryption means decrypts said first data only when said credit is greater than 
said cost. 

28. The security system of claim 27, further comprising credit means for 

increasing said credit. 

29. The security system of claim 28, wherein said credit means includes: 
means for receiving an amount to increase said credit; 

means for determining whether said amount is authentic; and 
means for increasing said credit if said amount is authentic. 

30. A monolithic device for providing security in a system for distribution 
^ of electronic data packages comprising: 

a circuit for decrypting an electronic data package to generate a 

decrypted package; 

a circuit for encrypting a portion of the decrypted package to 

generate an encrypted package; and 

a circuit for outputting said encrypted package. 

31. The monolithic device of claim 30, further comprising a circuit for 
determining whether a credit level exceeds a necessary credit level; and 

wherein said circuit for encrypting and circuit for outputting only 
execute if the credit level exceeds a necessary credit level. 



32. A monolithic device for providing security in a system for distribution 
of electronic data packages comprising: 

a circuit for decrypting and encrypted package to generate a 
decrypted package; 

5 a digital to analog conversion circuit for converting data in said 

decrypted package to analog data; and 

a circuit for outputting analog data. 

33. The monolithic device of claim 32, further comprising a circuit for 
decompressing said decrypted package to generate a decompressed package; and 

1 0 wherein said digital to analog conversion circuit converts data in said decompressed 
package to said analog data. 

34. A monolithic device for providing security in a system for distribution 
of electronic data packages comprising: 

an analog to digital conversion circuit for converting analog data to 

15 digital data; 

a circuit for encrypting the digital data generate a data package; and 
* ^ a circuit for outputting said data package. 

35. The monolithic device of claim 34, further comprising a circuit for 
compressing the digital data; and wherein said circuit for -encrypting encrypts 

20 compressed digital data. 

36. The monolithic device of claim 34, further comprising a circuit for 
determining whether a credit level exceeds a necessary credit level; and wherein 
said circuit for encrypting and circuit for outputting only execute if the credit level 
exceeds a necessary credit level. 

25 " 37. A monolithic device for providing security in a system for distribution 

of electronic data packages comprising: 
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a drcuit for decrypting a data package to generate a decrypted 

package; and 

a circuit for authenticating a source of the data package based upon 
data' in the decrypted package. 
5 38. The monolithic device of claim 37. further comprising: 

a circuit for adjusting a credit level based upon data in the decrypted 
package and an output of the circuit for authenticating. 
39. A music distribution system comprising: 
'' l a central storage location including available songs; 

1 o a plurality of computer jukeboxes: and 

at least one regional storage location communicating with the central 
storage location and the plurality of computer jukeboxes, the at least one regional 
storage location storing a portion of the available songs and transferring available 
songs to the computer jukeboxes. 
! 5 40. The music distribution system of claim 39, further comprising: 

a first communications system between said central storage location 
v and said at least one regional storage location; and 

a second communications system between said at least one regional 
storage location and each of said plurality of computer jukeboxes. 
20 41. The music distribution system of claim 40. wherein said first 

communications system includes one of a satellite transmission system, a 
telephone line, and a mailed diskette. 

42. The music distribution system of claim 40, wherein said second 
communications system includes one of a satellite transmission system, a 
25 telephone line and a mailed diskette. 



43. The music distribution system of claim 40, wherein said at least one 
regional storage location includes a master jukebox. 

44. A computer jukebox comprising: 

reception means for receiving songs from a central storage location; 

a memory for storing song; 

playing means for playing stored songs; 

an interface for outputting signals to control a compact disk changer, 

45. The computer jukebox of claim 44, further comprising; 

user selection means for selecting a song stored in one of said 
memory and on a compact disk in an attached compact disk changer and 

means for outputting control signals to said compact disk changer 
through said interface to execute a selected song on a compact disk. 



Amendments to the claims have been filed as follows 

CLAIMS 

1. A security system for a content distribution system having at least one distribution 
center and at least one electronic content execution and reproduction device comprising: 

receiving means for receiving first data encrypted in a first manner; 
5 first decryption means for decrypting the first data to create second data; 

' encryption means for encrypting the second data in a second manner to create third data; 
second decryption means for decrypting the third data to generate fourth data. 

2. The security system, of claim 1, wherein the at least one electronic content 
10 1 execution and reproduction device comprises at least one jukebox. 

3. The security system of claim 1 , wherein the at least one electronic content 
execution and reproduction device comprises at least one computer. 

15 4. The security system of claim 1, wherein the at least one electronic content 

execution and reproduction device comprises at least set-up box. 

5. The security system of claim 1 , wherein the fourth data can be executed to 
produce at least one of: sounds, graphics, text and video images. 

6. The security system of claim 1 , wherein the fourth data can be executed by the at 
least one electronic content execution and reproduction device to reproduce a copy of content 
including at least one of the group consisting of sound, graphics/text, and video images. 

25 7. The security system of claim 1 , wherein the receiving means, first decryption 

means, encryption means and second decryption means are located in the at least one device. 

8. The security system of claim 1, wherein the receiving means, first decryption 
means, encryption means, and second decryption means are located in a monolithic transaction 
30 device. 
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9. The security system of claim 7,- wherein the receiving means, first decryption 
means, encryption means and second decryption means are located in a secure device in the at^: 
least one device. 

10. The security system of claim 9, further comprising: 

means for generating a first external key associated with the at least one electronic 
content execution and reproduction device; 

means for generating a second external key associated with the secure device; 

means for encrypting the first external key, the second external key,- and a publicly- • 
known identifier associated with the secure device using an internal key associated with'the 
secure device to generate an initialization envelope; and 

means for delivering the initialization envelope to the secure device. 

1 L The security system of claim 1 0, wherein the publicly-known identifier comprises 
a serial number of the secure device. ' 

12. The security system of claim 10, further comprising: 

means for decrypting the initialization envelope, to recover the first external key, the 
second external key, and the publicly-known identifier. 

13. The security system of claim 12, further comprising: 

means for determining whether the recovered second external key and the internal key are 
the same. 

14. The security system of claim 7, wherein the coulcnl distribution system includes a 
plurality of devices; wherein each device includes a respective receiving means, first decryption . 
means, encryption means and second decryption means; and wherein the second manner used to 
encrypt the second data is different for each of the devices. 

15. The security system of claim I, further comprising: 

second encryption means for encrypting data in the first manner to generate the first data; 

and 
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transmission 



means for transmitting the first data. 



1 6. The security system of claim 1, further comprising: 

means for copying at least one of the first data, the second data, the third data, and the . 
5 fourth data. 

17. The security system of claim 16, wherein the _meaas for copying comprises: 
means for cooying at least one of the first data, the second data, the third data, and the 

, fourth data only to storage devices that are authorized to store the at least one of the first data, 'the 
10- second data, the third data, and the fourth data. • 

18. The security system of claim 17, wherein the means for copying comprises: . 
means for copying at least one of the first data, the second data, the.third data, and the 

fourth data in exchange for monetary payments. 
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19 The security system of claim 16, wherein the means for copying comprises: 
means for executing at least one of the firstdata, the second data, the third data, and the 

fourth data only in playback devices that are authorized to execute the at least one of the first 
data, the second dam, the third data, and the fourthdata. 

20 The security system of claim 19, wherein the means for executing comprises: 
means for executing at least one of the first data, the second data, the third data, and the 

fourth data in exchange for monetary payments. 

25 21. The security system of cl^ 

transmission means are located in the at least one distribution center. 

22 The security system of claim 21, furmer comprising: 

means forchanging the first manner used to encryptthe data to create a new first manner 
30 used to generate data to be transmitted after the first manner is changed; 

means for transmitting a new first manner for encrypting data to the first decrypts 

means. 
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23. The security system of claim 22, wherein the fiist decryption means includes: 
means for determining when the first datais received; 

means for determining whether the first data is encrypted in the first manner or in the new 
first manner based upon when the first data is received; and 
S means for decrypting the first data based upon one of the first manner and the new first 

manner. 

24. The security system of claim 22, wherein the first decryption means includes 

means for receiving the new first manner, and means for verifying that the new first manner is 

K . ■ 

10 authentic. 

25. The' security system ofclaim 1, further comprising: 

means for transmitting the second manner to the encryption means and the second 

decryption means; 
IS means for receiving the second manner, and 

means for verifying that the second manner is authentic 

26. The security system of claim' i, wherein the first data includes a cost associated 
with the first data; wherein the .first decryption means.includes means for detefmining whether a 

v 20 credit is greater, than the cosf. and wherein the first decryption means: decrypts the first data only 
when the credit is greater than the cost. 

27. The security system ofclaim 26, further ^raprising credit means for increasing 
the credit 
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28. The security system of claim 27, wherein the credit means includes: 
means for receiving an amount to increase the credit; 

means for determining whether the amount is authentic; and 
means for increasing the credit if the amount is authentic 

29. The security system ofclaim 1, further comprising: 



one-way communication means coupled between the at least one distribution center and 
the at least one electronic content execution and reproduction device for transmitting the first 
data from the at least one distribution center to the at least one electronic execution and . 
reproduction device. 

5 

30. A monolithic device for providing security in a system for distribution of 
electronic data packages comprising: 

a device for decrypting an electronic data package to generate a decrypted package; 
a device for encrypting a portion of the decrypted package to generate an encrypted 

ia package; and 

a device for outputting the encrypted package. 

31. The monolithic device of claim 30, further comprising a device for detennining 
whether a credit level exceeds a necessary credit level; and 

wherein the device for encrypting and device for outputting only execute if the credit 
level exceeds a necessary credit leveL 
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32. A monolithic device for providing security in a system for distribution of 
electronic data packages comprising: 
20 a device for decrypting an encrypted package to generate a decrypted package; 

a digital to analog conversion device for converting data in the decrypted package to 

. analog data; and 

a device for outputting analog data. 

25 33. Hie monolithic device of claim 32, further comprising: 

a device for reproducing the decrypted package. 

34. The monolithic device of claim 32, further comprising a device for decompressing 
die decrypted package to generate a decompressed package; and wherein the digital to analog 
30 conversion device converts data in the decompressed package to the analo g data. 



35. The monolithic device of claim 34, further comprising a device for reproducing 
the decompressed package. 

36. A monolithic device for providing security in a system for distribution of 

5 electronic data packages comprising: 

mamrfogtodigfcd wnveraondw^ data : 
a device for encrypting the digital data generate a data package; and 
a device for outputting the data package. 

10 h 37. The monolithic device of claim 36, further comprising a device for compressing 
' the digital data; and wherein the device for encrypting encrypts compressed digital data. 

38. The monolithic device of claim 36, further comprising a device for -determining 
. whether a credit level exceeds a necessary credit level; and 

,5 wherein the device for encrypting and device for outputdng only execute if Accredit 

level exceeds a necessary credit level. 

39. A monolithic device for providing security in a system for distribution of 
electronic data packages comprising: 

20 a device for decrypting a data package to generate a decrypted package; and 

adevice for authenticating a source of the data package based upon data in the decrypted 
• package. 

40. The monolithic device of claim 39, further comprising: 
25 a device for preventing reuse of the electronic data packages. 

41. The monolithic device of claim 39, further comprising: 

a device for adjusting a credit level based upon data in the decrypted package and an 
output of the device for authenticating. 

* 42. A content distribution system for local digital electronic content execution and 
reproduction devices, the system comprising: 



a cental storage location including available content, wherein the central storage location 
includes means to selectively encrypt the content; 

a menuing system, the menuing system includes storing a portion of a tnenu at a 
local device location, wherein the local device location is separate from the central storage 
5 location, and storing a complete menu at the central storage location; 

a communication means between the central storage location and the local devices, 
wherein the local devices download desired information automatically during a broadcast from 

the central storage location; and 

a scheduler for coordinating transmission from the central storage location to the local . 

10 K devices, 

43. The content distribution system of claim 42, wherein the local digital electronic 
content execution and reproduction devices comprise computers. 

l5 44. Ttecontentmstn^ 

content execution and reproduction devices comprise jukeboxes. 

45. The content distribution system of claim 42, wherein the local digital electronic 
content execution and reproduction devices comprise set-up boxes. 
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46. The contentdistribution system of claim 42, wherein the content comprises at 
. least one of sounds, text, graphics, video images, music, and songs. 

47 The contentdistribution system of claim 42; further including: 
a data structure that relates similar content, wherein the similar content has ahigh 
probability of being preferred by users of a particular location. 

48. The content distribution system of claim 47, wherein the probability is defined by 
a local device. 

; 49. The content distribution system of claim 47, wherein the probability is defined by 
a central storage system. 
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50. The content distribution system of claim 42, wherein the scheduler arranges the 
broadcast of songs automatically based on at least one of. user preferences at a device location/ 
anticipated use of similar content which is available on the local device, local content menu 

5 profiles and content automatically transmitted from the central storage location to the local 
device without a request 

51. The content distribution system of claim 42, wherein the scheduler accumulates 
requests for each different content within a time period defined in the request, and wherein one 

10 b broadcast is performed for the combination of the accumulated requests. 

52; The content distribution system of claim 42, wherein the content is placed on the 
local device based upon user inquiries about availability. 
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53. The content distribution system of claim 42, wherein the scheduler arranges the 
broadcast of content simultaneously to a plurality of devices. 



54. The content distribution system of claim 42, wherein the scheduler delays 
transmission of content within a requested time frame to improve transmission times and 

20 minimize costs. 

55. • The content distribution system of claim 42, wherein die transmission occurs 
automatically for non-interactive updates. 
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56. The content distribution system of claim 42, wherein the local device includes an 
advanced payment system to allow automatic access to the central storage system. 

57. The content distribution system of claim 42, wherein the menuing system includes 
a statistical replacement algorithm for retrieving additional portions of a menu based upon local 

30 accesses to the local device. 
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58. The content distribution system of claim 57, wherein the local accesses to the 
Local device define ami* of content categories, in which a percentage of content for a given 
category is determined by user preferences. 

59. The content distribution system of claim 42, wherein the local devices initiate 
communication with the central storage location and the content is retrieved by the local devices 
automatically based upon actual user preferences at a device location. 

60 The content distribution system of claim 59, wherein the content is retrieved in. 
advance of an automatic update based on an- anticipated use of sirnilar content which is locally 
j; accessed content, local content menu profiles and content automatically transmitted from the 
central storage location to the local device without a request 

61. A method for optimally transmitting content selections in a content distribution 

15 system comprising: . 

attaining statistics in a digital electronic content execution and reproduce devxee 
regarding anumber of timesanode in a menu hierarchy is reviewed by a user; 

using the statistics to indicate when a node has been viewed a predetermined numberof 

times; 

sending a request automatically for. updated content from the device to a central storage 

v . location, based on the statistic 

encrypting the content and credits in the central storage location; 

receiving requested content within a time period specified in the request, at the dev.ee; 

the receiving step further including transmitting content from the central storage locatton 

25 to a plurality of devices simultaneously; and 

storing a portion of the menu hierarchy at the device. 

62. The method of claim 50, wherein the content comprises at least one of sounds, 
text, graphics, video images, music, and songs. 

30 ' 
" 63. The method of claim 61, further comprising steps of: 

receiving first music encrypted in a first manner; 
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storing the fust content in the music-playing device; 

decrypting the first music in a secure device within the digital electronic content 
execution and reproduction device to create second content; 

encrypting the second content in a secure device within the digital electronic content 
5 execution and reproduction device; 

storing the first and second content in the digital electronic content execution and 

reproduction device; 

decrypting the second content in the secure device to create third content; 

playing the third content; 
10 a reproducing the third content; and 

reproducing the second content 

64. The meflwd of claim 61, wherein the digital electronic content execution and . 
reproduction device comprises a jukebox. 

65. The method of claim 61, wherein the digital electronic content execution and 
reproduction device comprises a computer. 

66. The method of .claim 61, wherein the digital electronic content execution and - 
20 reproduction device comprises a set-up box. 

67. The method for optimaUy transmitting content selections of claim 62,' wherein the 
menu hierarchy includes levels for music types, subtypes, albums, and songs. 

25 68. The method for optimaUy transmitting content selections of claim 61, wherein the 

statistics represent actual user preferences at the device location. 

69. The method for optimally transmitting content selections of claim 61, wherein the 
transmitting Is coordinatedby delaying transmission times of a portion of the requested content 



30 



within a delay time period defined in the request and according to a schedule ;o increase 
•transmission efficiency and minimize costs. 
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70. The method for optimally transmitting content selections of claim 61, further 
comprising: 

broadcasting a list of new available content from a central storage location to a plurality 
of local electronic content execution and reproduction devices; 
5 downloading the list into a local device; 

downloading requested content automatically during the broadcasting from the central 
storage location into the local device; 

loading credits through payments in the local device; 

decreasing a number of credits corresponding to a number of downloaded content . 

10 K 

71. The method of claim 70, wherein the electronic content execution and 
reproduction devices comprise jukeboxes. 

72. The method of claim 70, wherein the electronic content execution and 
15 reproduction devices comprise computers. 

73. The method of claim 70, wherein the electronic content execution and 
reproduction devices comprise set-up boxes. 

20 74. The method for optimally transmitting content selections of claim 61, wherein the 

% * content is retrieved from a hierarchy of classes of content, wherein the hierarchy is stored in its 
. entirety in the central storage location. 

75. The method for optimally transmitting content selections of claim 61, further 
25 including: 

deferring transmission of content based on local user needs; and 
transmitting content requested based on local user needs from the central storage location 
simultaneously to multiple devices, when requested delivery times overlap. 
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76. The method for optimally transmitting content selections of claim 
wherein the central storage location enables and disables the local device. 
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77 A content distribution system comprising: 

a central storage location including available content, .herein the central storage location 
includes means to selectively encrypt the content; 

a plurality of local electronic content execution and reproduction devices separate from 

the central storage location; and 

atleastone regional storage location separate from and conmunicating with the central 
storage location and the plurality of local electronic content execution and reproduction devices, 
the at least one regional storage location storing a portion of the arable songs and transferring 
available songs to the computer devices. 

78. _ The content distribution system of claim 77. wherein the content comprises at 
least one of sounds, text, graphics, video images, music, and songs. 

79. ThecontenttfstoT>utions^ 

l5 electronic content execution and reproduction devices comprises a plurality of jukeboxes. 

80. The content distribution system of claim 77, wherein the plurality of local 
electronic content execution and reproduction devices comprises a plurality of computers. 

?0 81. The content distribution system of claim 77, wherein the plurality oflocal 

electronic content execution and reproduction devices comprises a plurality of set-up boxes. 

82 The content distribution system of claim 77, further comprising: 

a first communications system between the central storage location and the at least one 

25 regional storage location; and 

• asecondcommumcationssystembe^^ 

each of the plurality of computer devices. 

83 Thecoutentdistribuuons^^ 

30 system includes one of a satellite transmission system, a telephone line, and a mailed drskette. 
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84. The content distribution system of claim 77, wherein the second communications 
system includes one of a satellite transmission system, a telephone line, and a mailed diskette. 

85. The content distribution system of claim 77, wherein the at least one regional 
5 location includes means to selectively encrypt the content. 

86. The content distribution system of claim 77, wherein the at least one regional 
• storage location includes a master computer device. 

10 87. A computer jukebox comprising: 

reception meansfor receiving songs from a central storage location, therein the central 
storage location includes means to selectively encrypt the content; 

a memory for storing content; 

playing means for playing stored content; 
15 an interface for outputting signals to control a compact disk changer to select and play 

desired content 

88. The computer jukebox of claim 87, further comprising: 

user selection means for selecting content stored in one of the memory and on a compact 
20 disk in an attached compact disk changer, and 

means for outputting control signals to the compact disk changer through the interface to 

execute selected content on a compact disk. 

89 A security system for a content distribution system having at least one distribution 
25 center and at least electronic content execution aud reproduction device, the system comprising; 
content stored in an encrypted format in the at least one device; 
monolithic device in the at least one device; and 
monolithic decryption device in the at least one device. 

30 90. The security system of claim 89, wherein the at least electronic content execution 

and reproduction device comprises at least one computer. 
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9 1 . The security system of claim 89, wherein the at least electronic content execution 
and reproduction device comprises at least one jukebox. 

92. The security system of claim 89, wherein the at least electronic content execution 
5 and reproduction device comprises at least one set-up box. 

93 . The security system of claim 89, wherein the content comprises at least one of 
sounds, text, graphics, video images, music, and songs. 

10 * 94. The security system for a content distribution system of claim 89, further 

including: 

an external key forthe at least one device; v 
an external key for encryption and decryption device; 
an external identifier for the at least one device; and 
15 an internal key for the encryption and decryption device. 

95. A method for securing a content distribution system having at least one 
distribution center and at least one electronic content execution and reproduction device, the " 
method comprising steps of: 

20 storing at least some content in an encrypted format in the at least one device; 

decrypting the at least some coatent using secure device in the at least one device; 

determining whether a credit level in the at least one device is greater than a cost for 
executing and reproducing the at least some content; and 

encrypting the at least some content with the secure device when the credit level is 
25 greater than the cost. 

96. The method of claim 95, wherein the at least one electronic content execution and 
reproduction device comprises at least one computer. 

30 97. The method of claim 95, wherein the at least one electronic content execution and 

reproduction device comprises at least one jukebox. 



98. The method of claim 95, wherein the at least one electronic content execution and 
reproduction device comprises at least one set-up box. 

99. The method of claim 95, wherein the at least one content comprises at least one of 
the group comprising sounds, text, graphics,' video images, music, and songs. 

1 00. The method for securing a content distribution system of claim 95, further 
comprising the step oft 

terminating the step of decrypting when the credit level is less than the cost 

101. The method for securing a content distribution system of claim 95, fiirther 

comprising the steps of: 

cr eatin g a first copy of the at least some content in the encrypted format, wherein the first 
copy is in an encrypted or decrypted format; and 

creating a new copy of the first copy, wherein the new copy is in an encrypted or 
decrypted format 
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